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(57) Abstract: Disclosed is a technology by which rules on communication permission or control are enforced to network internal 
devices such that an environment which looks as if to have a virtual firewall existing between network internal devices can be estab- 
lished. A cummunicalion contiul apparatus for this is located on the same level in the nctwuric as other devices arc located. By using 
this communication control apparalus, an address resolution protocol (ARP) packet in which a data link layer address is manipulated 

is provided lo devices lhal are the ohjecLs of communication cut-off, such that data packets transmitted by the communication cut-off 
object devices are transmitted to manipulated abnormal addresses. By doing so, communication with the communication cut-off ob- 
ject devices is cut off. For a device which is in a communication cut-off state although the device is not an object of communication 
cut-off any more, the communication control apparatus transmits an ARP packet including normal address information to the device 
such that the communication cut-otT state is canceled. 
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